Vulnerability Spotlight: EZB Systems UltraISO ISO Parsing Code Execution Vulnerability

Summary: Cisco Talos disclosed TALOS-2017-0342 (CVE-2017-2840), a vulnerability in EZB Systems' UltraISO disk image software that can allow remote code execution when a specially crafted ISO image is opened and parsed. The flaw sits in parsing the Rock Ridge alternative name (NM) System Use Entry, where a single-byte length field manipulated to less than 5 bytes makes the _strncpy maxlen parameter extremely large, causing memory corruption in the context of the UltraISO user.
What you should know: The attack rides on an ordinary ISO file, the same format most software and operating system installers ship in, so a user opening a disk image is the entire trigger. Talos notes Windows 8 and later can mount ISOs natively, which removes the need for the third-party utility in many cases.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2017-2840
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026